网络监控系统通过网络处理器和改进的捕获驱动进行高效数据捕获,通过设置虚拟磁盘、优化文件系统进行海量数据存储,并着眼于内容审计,采用多线程、简化协议等方法进行协议分析,解决了在千兆级网络监控中存在的一系列性能问题。
In this network monitoring system, data capture was designed based on network processor and improved capture driver. Huge data storage was described through using virtual disk and optimized file system. For content auditing, multithread and simplified protocol were used to carry on protocol analysis. All of these improve the performance of gigabit network monitoring.